Back to docsRecipe

TLS Certificate Setup

Provision a Let's Encrypt certificate for your Nimbus dashboard domain using Certbot and auto-renewal. This recipe assumes Ubuntu 22.04 and Nginx.

Prerequisites

  • DNS A record pointing your domain to the server IP
  • Nginx installed and serving on port 80
  • Firewall allowing HTTP (80) and HTTPS (443)

1. Install Certbot

sudo apt update && sudo apt install certbot python3-certbot-nginx -y

2. Obtain Certificate

sudo certbot --nginx -d dashboard.yourdomain.com

Certbot edits your Nginx config automatically and enables HTTPS redirect.

3. Verify Auto-Renewal

sudo certbot renew --dry-run

Certbot installs a systemd timer. No manual renewal needed.

Note: If you're behind a CDN or proxy, use the DNS challenge instead: sudo certbot certonly --manual --preferred-challenges dns